https://patchfirst.co/vendor/rarlab/New and newly exploited RARLAB CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2025-6218/CVE-2025-6218#kevTue, 09 Dec 2025 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2025-12-09. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link. Priority 68.4 of 100.kevpublic-exploitT1204.001https://patchfirst.co/cve/CVE-2025-8088/CVE-2025-8088#kevTue, 12 Aug 2025 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2025-08-12, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.0% (higher than 99.85% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 79.1 of 100.kevransomwarepublic-exploitT1204.002T1059https://patchfirst.co/cve/CVE-2014-125119/CVE-2014-125119Fri, 25 Jul 2025 00:00:00 GMTRARLab · WinRAR. Not in CISA KEV. EPSS 2.0% (higher than 80.6% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. Priority 62.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-38831/CVE-2023-38831#kevThu, 24 Aug 2023 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2023-08-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204 User Execution; T1005 Data from Local System; T1041 Exfiltration Over C2 Channel; T1053 Scheduled Task/Job; T1105 Ingress Tool Transfer; T1112 Modify Registry; +1 more. Named in 1 threat report. Priority 82.3 of 100.kevransomwarepublic-exploitT1204T1005T1041T1053T1105T1112T1486https://patchfirst.co/cve/CVE-2022-30333/CVE-2022-30333#kevTue, 09 Aug 2022 00:00:00 GMTRARLAB · UnRAR. In CISA KEV since 2022-08-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1565.001 Stored Data Manipulation. Priority 78.2 of 100.kevransomwarepublic-exploitT1565.001https://patchfirst.co/cve/CVE-2018-20250/CVE-2018-20250#kevTue, 15 Feb 2022 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2022-02-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 96.0% (higher than 99.88% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1036 Masquerading; T1204.002 Malicious File. Named in 3 threat reports. Priority 86.2 of 100.kevransomwarepublic-exploitT1036T1204.002